YOUR PRIVACY AND CONSENT TO PROCESSING OF PERSONAL DATA

Based on your consent (the “Consent”), Novo Nordisk A/S will process (e.g. collect, use, store, and share) your personal data in accordance with this Consent and applicable law.

1. WHO ARE WE?

The company responsible for processing your personal data is:
Novo Nordisk A/S
Novo Alle
2880 Bagsaerd
Denmark
CVR No. 24256790
+45 4444 8888


You can always contact Novo Nordisk A/S or the Novo Nordisk Data Privacy Officer at privacy@novonordisk.com with questions or concerns about how we process your personal data.

2. HOW DO WE COLLECT PERSONAL DATA ABOUT YOU?

We get your personal data from the following sources:

• From you directly

• From other Novo Nordisk entities

• From vendors or suppliers

3. WHY DO WE PROCESS YOUR PERSONAL DATA?

We process personal data about you for the following purpose:

• To coordinate a conference or event

• To arrange transfers of value to you (or for your benefit), including but not limited to travel, accommodation, reimbursements

• To analyse data for compliance with applicable laws and regulations

• To meet transparency obligations (e.g. the EFPIA Disclosure Code, etc.) - only relevant for Healthcare Professionals (HCPs)

You are not required to provide us with your personal data. However, if you do not provide your personal data, we will not be able to accommodate your participation in this meeting/event.

4. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

For the purpose described above in Section 3, we may collect and process the following types of personal data:

• Contact information, biography, photograph, video (name, address, telephone number, email address etc)

• Data regarding employment (e.g. company, job title, country of work)

• Data regarding professional credentials (e.g. affiliations, specialties, memberships etc)

• Financial information (bank account number, transfer of value amounts and dates, etc.)

• Emergency contact (e.g., name and telephone)

• Data revealing racial or ethnic origin (e.g. dietary preferences);

• Data concerning health (e.g. dietary preferences);

• Data regarding religious beliefs (e.g. dietary and/or travel preferences);

• Data for the purpose uniquely identifying a natural person (e.g. passport data)

5. HOW DO WE SHARE YOUR PERSONAL DATA?

We may share your personal data with:

• Suppliers or vendors that assist our company (e.g., logistics agencies, travel booking

agencies, hotels, restaurants, IT service providers, financial institutions, law firms etc.)

• Other Novo Nordisk entities (e.g., Novo Nordisk affiliates in other countries)

• Public authorities (e.g. in relation to visa issuing etc.)

6. WHEN DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE THE EU/EAA?

For the purposes described above in Section 3, Novo Nordisk may transfer your personal data to data processors residing in countries outside the European Economic Area (EEA), in order to provide the services to you.

We use one of the following safeguards, as required by law, to protect your personal data in case of such transfers:
• The transfer is to a Novo Nordisk entity covered by Novo Nordisk’s Binding Corporate Rules, available at https://www.novonordisk.com/about-novo-nordisk/corporate-governance/personal-data-protection.html

• The destination countries are deemed by the EU Commission to have an adequate level of protection of personal data

• We have entered into Standard Contractual Clauses for the Transfer of Personal Data to Third Countries. You can get a copy of the Clauses by contacting us as described in Section 1;

• The EU-US Privacy Shield Framework for transfers to Privacy Shield-certified and US-based companies and organisations. More information and a list of Privacy Shield-certified companies and organisations are available at https://www.privacyshield.gov/welcome

You can always request information on the data processor(s) we transfer your data to by using the contact information under Section 1.

7. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

We will keep your personal data for the following period of time:

• For as long as needed to provide you with the services requested by you;

• For as long as required by applicable law.

8. WHAT ARE YOUR RIGHTS?

You can obtain further information on the personal data which we store and processes about you and to the extent you have such right under applicable law, you can get a copy of your personal data in a structured, commonly used and machine-readable format. Further, you may object to your personal data being processed or request that your personal data is rectified. Furthermore, you may withdraw your consent to our processing of your personal data at any time.

If you wish to use one or more of your rights, please contact us using the contact information under Section 1.

If you have any complaints about our processing of your personal data, you may contact the Data Protection Agency in your country (e.g. Danish Data Protection Agency if you are a citizen in Denmark).

9. HOW TO REQUEST SOME OR ALL OF YOUR INFORMATION TO BE DELETED:

Please email leap-support@everlearn.ai and we will process your request within 48 hours.